| CVE-2017-1000056 |
critical |
9.8 |
9.8 |
|
|
|
9y ago |
Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object. |
| CVE-2021-25741 |
high |
— |
8.0 |
|
|
|
5y ago |
A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host file… |
| CVE-2015-5305 |
medium |
— |
6.4 |
|
|
|
11y ago |
Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handle… |
| CVE-2020-8554 |
medium |
6.3 |
6.3 |
|
|
|
4y ago |
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacke… |
| CVE-2021-25735 |
medium |
— |
5.5 |
|
|
|
5y ago |
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Adm… |
| CVE-2020-8561 |
medium |
4.1 |
4.1 |
|
|
|
5y ago |
A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver re… |
| CVE-2021-25740 |
low |
3.1 |
3.1 |
|
|
|
5y ago |
A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack. |
| CVE-2015-7561 |
low |
3.1 |
3.1 |
|
|
|
9y ago |
Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes |
| CVE-2025-4563 |
low |
— |
2.5 |
|
|
|
1y ago |
A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicResourceAllocation feature gate is enabled,… |
| CVE-2021-25737 |
low |
— |
2.5 |
|
|
|
5y ago |
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or … |
| CVE-2020-8562 |
low |
2.2 |
2.2 |
|
|
|
4y ago |
As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Servi… |
| CVE-2025-13281 |
unknown |
— |
— |
|
|
|
6mo ago |
A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitr… |
| CVE-2025-5187 |
unknown |
— |
— |
|
|
|
9mo ago |
A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to … |
| CVE-2024-7598 |
unknown |
— |
— |
|
|
|
1y ago |
A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects… |
| CVE-2025-1767 |
unknown |
— |
— |
|
|
|
1y ago |
This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been dep… |
| CVE-2024-9042 |
unknown |
— |
— |
|
|
|
1y ago |
This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below. |
| CVE-2025-0426 |
unknown |
— |
— |
|
|
|
1y ago |
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by f… |
| CVE-2024-10220 |
unknown |
— |
— |
|
|
|
2y ago |
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through … |
| CVE-2024-0793 |
unknown |
— |
— |
|
|
|
2y ago |
Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes |
| CVE-2024-5321 |
unknown |
— |
— |
|
|
|
2y ago |
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container l… |
| CVE-2019-11245 |
unknown |
— |
— |
|
|
|
2y ago |
In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. I… |
| CVE-2020-8563 |
unknown |
— |
— |
|
|
|
2y ago |
In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects < v1.19.… |
| CVE-2020-8566 |
unknown |
— |
— |
|
|
|
2y ago |
In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during p… |
| CVE-2020-8557 |
unknown |
— |
— |
|
|
|
2y ago |
The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted i… |
| CVE-2020-8559 |
unknown |
— |
— |
|
|
|
2y ago |
The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an att… |
| CVE-2024-3177 |
unknown |
— |
— |
|
|
|
2y ago |
A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containe… |
| CVE-2023-5528 |
unknown |
— |
— |
|
|
|
3y ago |
A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters… |
| CVE-2023-3955 |
unknown |
— |
— |
|
|
|
3y ago |
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if… |
| CVE-2023-3676 |
unknown |
— |
— |
|
|
|
3y ago |
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if… |
| CVE-2021-25736 |
unknown |
— |
— |
|
|
|
3y ago |
Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer controller does not … |
| CVE-2023-2728 |
unknown |
— |
— |
|
|
|
3y ago |
Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a… |
| CVE-2023-2727 |
unknown |
— |
— |
|
|
|
3y ago |
Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admissio… |
| CVE-2023-2431 |
unknown |
— |
— |
|
|
|
3y ago |
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affecte… |
| CVE-2022-3294 |
unknown |
— |
— |
|
|
|
3y ago |
Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes … |
| CVE-2022-3162 |
unknown |
— |
— |
|
|
|
3y ago |
Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted … |
| CVE-2020-8565 |
unknown |
— |
— |
|
|
|
3y ago |
In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. Thi… |
| CVE-2020-8564 |
unknown |
— |
— |
|
|
|
3y ago |
In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secret… |
| CVE-2019-11250 |
unknown |
— |
— |
|
|
|
4y ago |
The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components (such a… |
| CVE-2019-11243 |
unknown |
— |
— |
|
|
|
4y ago |
In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token, username/password, and client certifi… |
| CVE-2017-1002102 |
unknown |
— |
— |
|
|
|
4y ago |
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary… |
| CVE-2018-1002100 |
unknown |
— |
— |
|
|
|
4y ago |
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary… |
| CVE-2019-1002100 |
unknown |
— |
— |
|
|
|
4y ago |
In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch… |
| CVE-2020-8551 |
unknown |
— |
— |
|
|
|
4y ago |
The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP… |
| CVE-2019-1002101 |
unknown |
— |
— |
|
|
|
4y ago |
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kub… |
| CVE-2020-8558 |
unknown |
— |
— |
|
|
|
4y ago |
The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services boun… |
| CVE-2018-1002101 |
unknown |
— |
— |
|
|
|
4y ago |
In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nodes, which could lead to command line argument inje… |
| CVE-2020-8555 |
unknown |
— |
— |
|
|
|
4y ago |
The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows cert… |
| CVE-2021-25743 |
unknown |
— |
— |
|
|
|
5y ago |
kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as… |
| CVE-2019-11253 |
unknown |
— |
— |
|
|
|
5y ago |
Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON paylo… |
| CVE-2019-11251 |
unknown |
— |
— |
|
|
|
5y ago |
The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provided by tar output of a malicious container to place… |
